diff options
| author | l0crian1 <ryan.claridge13@gmail.com> | 2026-08-01 00:08:43 -0400 |
|---|---|---|
| committer | l0crian1 <ryan.claridge13@gmail.com> | 2026-08-11 12:31:01 -0400 |
| commit | dc6da4b49c383312b069eb3bdc8ed6237a33013a (patch) | |
| tree | 87e9f06ec77200f261fc74164ae9f0d45a3de9fa /src | |
| parent | feda5ce364d9d27a1646e5d244d73bb2c4265a81 (diff) | |
| download | vyos-1x-dc6da4b49c383312b069eb3bdc8ed6237a33013a.tar.gz vyos-1x-dc6da4b49c383312b069eb3bdc8ed6237a33013a.zip | |
T8247: Retained protocol number if it is not in the keymap
Diffstat (limited to 'src')
| -rwxr-xr-x | src/conf_mode/firewall.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/conf_mode/firewall.py b/src/conf_mode/firewall.py index f53183f5d..32356f6d7 100755 --- a/src/conf_mode/firewall.py +++ b/src/conf_mode/firewall.py @@ -283,7 +283,7 @@ def verify_rule(firewall, family, hook, priority, rule_id, rule_conf): if rule_conf['protocol'].isdigit(): if not dict_search('inet_proto_map', firewall): generate_inet_proto_keymap(firewall) - rule_conf['protocol'] = dict_search(rule_conf['protocol'], firewall['inet_proto_map'], "") + rule_conf['protocol'] = dict_search(rule_conf['protocol'], firewall['inet_proto_map'], rule_conf['protocol']) if rule_conf['protocol'] == 'icmp' and family == 'ipv6': raise ConfigError(f'{rule_num}Cannot match IPv4 ICMP protocol on IPv6, use ipv6-icmp') |